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THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
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DETAILED ACTION 
Response to Arguments 

1 . Applicant's arguments with respect to claims 1-30 have been considered but are 
moot in view of the new ground(s) of rejection, Howard et al. (U.S. Patent No. 
6,678,731). 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AIPA (pre-AlPA 35 U.S.C. 102(e)). 

3. Claims 1-32 are rejected under 35 U.S.C. 102(e) as being anticipated by Howard 
et al. (U.S. Patent No. 6,678,731). 

Referring to claims 1,13,24 Howard et al. discloses a system and method for web 
server user authentication comprising: receiving a request to connect a valid user, 
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creating a user password cookie using a shared secret key and transmitting the user 
password cookie in response to the request in Column 7, lines 1-46. 
Referring to claims 2,14, and 26, Howard et al. discloses the claimed limitation of 
reading a user credential cookie, requesting a user ID and password, receiving the user 
ID and password, and validating the user's identity in Column 7, lines 48-67, Column 8, 
lines 1-16. 

Referring to claims 3 and 15, Howard et al. discloses the claimed limitation of 
authenticating the user ID and password with the user profile information stored within 
the cookie in Column 5, lines 48-67, Column 6, lines 1-27. 
Referring to claims 4 and 16, Howard et al. discloses the claimed limitation of an 
operating system in Figure 2 and Column 4, lines 52-56. 

Referring to claims 5,7,17, 23,and 29, Howard et al. discloses the claimed limitation of 
combining the user ID and password with a time stamp (cookie) and encrypting the 
cookie using a key in Column 8, lines 1 8-41 . 

Referring to claims 6 and 18, Howard et al. discloses the claimed limitation of obtaining 
the user password cookie, verifying that the user password cookie is valid, and updating 
the user password cookie using the key in Column 7, lines 48-67, Column 8, lines 1-8. 
Referring to claims 8 and 28, Howard et al. discloses the claimed limitation of having a 
group of web servers sharing a key in Column 7, lines 33-39. 
Referring to claims 9 and 19, Howard et al. discloses the claimed limitation of 
authenticating a second valid user requesting access to the web server in Column 3, • 
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lines 25-32. According to the invention, it is implied that multiple users can be 
authenticated when requesting access to the web server. 

Referring to claims 10-12, 20-22 and 30 are rejected under Claim 1 . According to the 
invention, multiple users can be authenticated and provided access to multiple servers 
in Column 2, lines 15-26, group of web servers in Column 3, lines 21-24, updating the 
user password cookie in Column 7, lines 27-31 . 

Referring to claim 25, Howard et al. discloses the claimed limitation of receiving, by a 
web server, a request to connect to a user to the web server, determining if the user is 
valid, if not, then the user is denied, if valid, then if a valid user password cookie exists, 
then updating the user password cookie using a key, if no cookie exists, then generating 
a user password cookie, transmitting the user password cookie to the user and 
connecting the web server to the user in Column 7, lines 1-67, Column 8, lines 1-41. 
Referring to claim 27, Howard et al. discloses the claimed limitation of obtaining the 
user password cookie, verifying that the user password cookie is valid, if the user 
password cookie is valid, then the user is valid, if the user password cookie is not valid, 
then the user is not valid in Column 9, lines 10-56. 

Referring to claim 31 , Howard et al. discloses the claimed limitation wherein the shared 
secret key is used by a communication ring comprising a plurality of web servers in 
Column 3, lines 21-26. 

Referring to claim 32, Howard et al. discloses the claimed limitation wherein the 
computer program, which when executed by the processor unit further configures the 
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computer system for connecting the user to the computer system in Column 6, lines 28- 
57. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 703- 
305-8293. The examiner can normally be reached on Mon - Thu 7:00 - 5:00 pm; off 
every Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse can be reached on 703-308-4789. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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